CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- magepeople team event manager for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreWordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability6.5 Medium
- elastic kibanaKibana arbitrary code execution via prototype pollution9.1 Critical
- ibm openbmcIBM OpenBMC authentication bypass7.5 High
- ibm common licensingIBM Common Licensing cross-site scripting4.8 Medium
- ibm common licensingIBM Common Licensing information disclosure7.5 High
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability7.5 High
- wpweb docket (woocommerce collections / wishlist / watchlist), wpwebelite docket +1 moreWordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability7.5 High
- wpdeveloper betterdocsWordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability6.5 Medium
- wc product table woocommerce product table lite, wcproducttable woocommerce product table +1 moreWordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability6.5 Medium
- realmag777 husky, pluginus husky - products filter professional for woocommerce +1 moreWordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability9.1 Critical
- wpweb woocommerce pdf vouchersWordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability8.6 High
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- carazo import and export users and customersWordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability7.5 High
- david maucher send users emailWordPress Send Users Email plugin <= 1.5.1 - Sensitive Data Exposure vulnerability5.3 Medium
- weblizar coming soon, responsive coming soon \& maintenance mode +1 moreWordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability5.3 Medium
- zoho campaigns campaignsWordPress Zoho Campaigns plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- olive themes one click demo import, olivethemes olive one click demo import +1 moreWordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability5.3 Medium
- hitpay payment gateway for woocommerceWordPress HitPay Payment Gateway for WooCommerce plugin <= 4.1.3 - Sensitive Data Exposure via Log File vulnerability7.5 High
- meddiff technologies instarispacsReflected XXS Vulnerability in InstaRISPACS Software6.4 Medium
- mbe worldwide s.p.a. eshipWordPress MBE eShip plugin <= 2.1.2 - Sensitive Data Exposure vulnerability5.3 Medium
- muhammad rehman contact form 7 summary and printWordPress Contact Form 7 Summary and Print plugin <= 1.2.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability7.1 High
- wp swings wallet system for woocommerceWordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability7.5 High
- anhvnit woocommerce openposWordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Sensitive Data Exposure vulnerability7.5 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +47 more +49 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...7.1 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +48 more +50 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...7.3 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +63 more +65 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All...8.6 High
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application...5.3 Medium
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application...9.4 Critical
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application...8.7 High
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate...5.1 Medium
- siemens nx, nx 1988 firmware +1 moreA vulnerability has been identified in NX (All versions < V2406.3000). The affected applications...7.3 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...2.1 Low
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...6.3 Medium
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...7.6 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...8.7 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...7.5 High
- siemens location intelligence family, location intelligence +1 moreA vulnerability has been identified in Location Intelligence family (All versions < V4.4)....6.9 Medium
- siemens location intelligence family, location intelligence +1 moreA vulnerability has been identified in Location Intelligence family (All versions < V4.4)....6.9 Medium
- siemens location intelligence family, location intelligence +1 moreA vulnerability has been identified in Location Intelligence family (All versions < V4.4). The...6.0 Medium
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +13 more +15 moreA vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO!...5.1 Medium
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application...8.5 High
- d-link dnr-202l, dnr-322l, dnr-326 +18 more +20 moreD-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection5.3 Medium
- magic-post-thumbnail generate images, magic post thumbnail +1 moreGenerate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSS4.8 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Count…6.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action8.8 High
- sap document builderMissing Authorization check in SAP Document Builder4.3 Medium
- sap student life cycle management, sap se student life cycle management (slcm) +1 moreMissing Authorization Check in SAP Student Life Cycle Management (SLcM)4.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter6.4 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform4.3 Medium
- sap permit to workInformation Disclosure vulnerability in SAP Permit to Work4.3 Medium
- Show moreLoading…